GPO, Security, Utilities, Windows

Add Local intranet site via GPO

Add Local intranet via GPO

1. Prepare

– DC : Domain Controller (testdc.com)

– WINClient : Domain Member

 

2. Step by step guide :

Add Local intranet site via GPO

+ DC : Add the Website URL or IP https://testsite.com to Local intranet via GPO

– Server manager > Group Policy Management > Right click “Default Domain policy” : Edit

– User configuration > Policies > Administrative templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone assignment list : Enable

Continue reading “Add Local intranet site via GPO”

Utilities, Windows

How to enable ‘Windows Sandbox’ on Windows 10

ISOLATION FOR UNTRUSTED APPS

How to enable ‘Windows Sandbox’ on Windows 10

You can now run untrusted apps in isolation with Windows Sandbox, and here’s how to use enable the feature.

On Windows 10, “Windows Sandbox” is a lightweight isolated environment available starting with the May 2019 Update to test untrusted applications without affecting your device.

Sandbox works just like a virtual machine using Microsoft’s hypervisor and hardware virtualization to run a separate kernel that isolates a Windows Sandbox session from the host. Basically, it’s a tiny installation of Windows 10 (around 100MB in size) enough to install and run untrusted classic applications isolated from the main installation.

According to the company, Windows Sandbox is also very efficient as it uses integrated kernel scheduler, smart memory management, and virtual graphics, and it’s disposable. Once you finish using the app, the sandbox gets deleted, which means that every time you start the feature, you’ll start with a clean install of Windows 10.

In this guide, you’ll learn the steps to enable Windows Sandbox available with the Windows 10 May 2019 Update.

How to enable Windows Sandbox on Windows 10

To enable “Windows Sandbox” to run untrusted applications, use these steps:

  • Open Start
  • Search for Turn Windows features on or off and click the top result to open the experience.

Check the Windows Sandbox option.

Continue reading “How to enable ‘Windows Sandbox’ on Windows 10”

Frewall, GPO, Remote Desktop, Uncategorized, Utilities, Windows, Windows Server

How do I enable Remote Desktop connections to Windows using Group Policy on a Windows Server domain?

A. With the rename of Terminal Services to Remote Desktop Services in Server, you also have new locations for the Group Policy settings to enable Remote Desktop.

  1. Open the Group Policy Object (GPO) you’ll use for the remote desktop settings.
  2. Navigate to Computer Configuration, Policies, Administrative Templates, Network, Network Connections, Windows Firewall, Domain Profile.
  3. Double-click Windows Firewall: Allow inbound Remote Desktop exceptions.
  4. Set this to Enabled and add the addresses that can connect. This could be * for all IP addresses, specific subnets, or localsubnet for only the local subnet.
  5. Click OK.
  6. Navigate to Computer Configuration, Policies, Administrative Templates, Windows Components, Remote Desktop Services, Remote Desktop Session Host, Connections.
  7. Double-click Allow users to connect remotely using Remote Desktop Services, set it to Enabled, then click OK.
  8. Close the Group Policy object and make sure it’s linked to the required locations.

Below is the report of my GPO that enables Remote Desktop. It will also enable Remote Desktop on Windows XP, Windows Server 2003, and later systems.

GPO to enable Remote Desktop
Utilities, Windows

How to make a custom control panel with Windows GodMode

With Windows’ hidden feature, called GodMode, you can create a custom control panel, giving you access to your most important settings and tools.

Count the steps it takes to get to a Windows setting–it’s often a laborious task. Want to do a disk cleanup? You’ll have to go to: Start > All Programs > Accessories > System Tools > Disk Cleanup.

Many Windows settings and tools require similar, lengthy sets of steps, especially for minor system tweaks that are buried within tools (like adding a new wireless network).

God Mode, a hidden Windows feature, gives you a complete list of every single system setting and tool, letting you create your own customized control panel for quicker access to these settings and tools.

Follow these steps to create your custom control panel:

  1. Enable God Mode: Create a new folder on your desktop, and name it GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
  2. Create another new folder on your desktop, titled “Control Panel” (or any other name you choose).
  3. Open up the folder created in Step 1. You’ll see a huge list of system settings, tools, and options. The list even includes options that are buried within tools, like Change Desktop Background. Find your most frequently used settings, and drag them into your new “Control Panel” folder.Tip: Collapse all the settings groups for easier viewing of all the GodMode items.
  4. (Optional) Pin your new control panel to the Start menu or Taskbar for quick access by dragging and dropping.

Feel free to access the original GodMode folder whenever you want to add new settings to your custom control panel. Additionally, all the GodMode settings–including the otherwise buried settings, like “Change screen orientation”–can be accessed by searching the Start menu.